From 815d3c56e3095c3b34a19ac124c2d1b806f84e49 Mon Sep 17 00:00:00 2001 From: Nick Kralevich <nnk@google.com> Date: Thu, 14 Jan 2016 21:20:05 -0800 Subject: [PATCH] ppp.te: Remove allow ppp toolbox_exec:file rx_file_perms; auditallow says no denials. Change-Id: Ib4e38f5393d3f3ba67277017abc848f5e7c04efd --- ppp.te | 3 --- 1 file changed, 3 deletions(-) diff --git a/ppp.te b/ppp.te index 58b640ae5..d7ed70d5d 100644 --- a/ppp.te +++ b/ppp.te @@ -11,9 +11,6 @@ allow ppp mtp:unix_dgram_socket rw_socket_perms; allow ppp ppp_device:chr_file rw_file_perms; allow ppp self:capability net_admin; allow ppp system_file:file rx_file_perms; -# XXX Run toolbox. Might not be needed. -allow ppp toolbox_exec:file rx_file_perms; -auditallow ppp toolbox_exec:file rx_file_perms; allow ppp vpn_data_file:dir w_dir_perms; allow ppp vpn_data_file:file create_file_perms; allow ppp mtp:fd use; -- GitLab